CN110741613A - 一种加密数据流的识别方法、设备、存储介质及系统 - Google Patents
一种加密数据流的识别方法、设备、存储介质及系统 Download PDFInfo
- Publication number
- CN110741613A CN110741613A CN201780091924.9A CN201780091924A CN110741613A CN 110741613 A CN110741613 A CN 110741613A CN 201780091924 A CN201780091924 A CN 201780091924A CN 110741613 A CN110741613 A CN 110741613A
- Authority
- CN
- China
- Prior art keywords
- authentication
- core network
- data
- parameter
- network equipment
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/03—Protecting confidentiality, e.g. by encryption
- H04W12/033—Protecting confidentiality, e.g. by encryption of the user plane, e.g. user's traffic
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/16—Implementing security features at a particular protocol layer
- H04L63/166—Implementing security features at a particular protocol layer at the transport layer
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W76/00—Connection management
- H04W76/10—Connection setup
- H04W76/12—Setup of transport tunnels
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W76/00—Connection management
- H04W76/20—Manipulation of established connections
- H04W76/25—Maintenance of established connections
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W76/00—Connection management
- H04W76/30—Connection release
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W80/00—Wireless network protocols or protocol adaptations to wireless operation
- H04W80/02—Data link layer protocols
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W80/00—Wireless network protocols or protocol adaptations to wireless operation
- H04W80/08—Upper layer protocols
- H04W80/10—Upper layer protocols adapted for application session management, e.g. SIP [Session Initiation Protocol]
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
本发明实施例提供了一种加密数据流的识别方法、设备、可读存储介质及系统;该方法可以应用于核心网设备,所述方法包括:接收用户设备UE发送的承载有鉴权数据的数据包;其中,所述鉴权数据包括第一鉴权参数、第一鉴权结果以及应用标识;基于所述第一鉴权参数和第二鉴权参数,按照设定的鉴权算法获得第二鉴权结果;其中,所述第二鉴权参数为预存的所述应用标识对应的鉴权参数;当所述第二鉴权结果与所述第一鉴权结果比对一致时,则建立所述数据包的网络协议IP五元组与所述应用标识之间的关联关系;其中,所述关联关系用于后续对所述UE发送的与所述应用标识对应的加密数据流进行识别。
Description
PCT国内申请,说明书已公开。
Claims (33)
- PCT国内申请,权利要求书已公开。
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
PCT/CN2017/106349 WO2019075608A1 (zh) | 2017-10-16 | 2017-10-16 | 一种加密数据流的识别方法、设备、存储介质及系统 |
Publications (2)
Publication Number | Publication Date |
---|---|
CN110741613A true CN110741613A (zh) | 2020-01-31 |
CN110741613B CN110741613B (zh) | 2021-01-12 |
Family
ID=66173068
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201780091924.9A Active CN110741613B (zh) | 2017-10-16 | 2017-10-16 | 一种加密数据流的识别方法、设备、存储介质及系统 |
CN201880038900.1A Active CN110771116B (zh) | 2017-10-16 | 2018-05-03 | 一种加密数据流的识别方法、设备、存储介质及系统 |
Family Applications After (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201880038900.1A Active CN110771116B (zh) | 2017-10-16 | 2018-05-03 | 一种加密数据流的识别方法、设备、存储介质及系统 |
Country Status (4)
Country | Link |
---|---|
US (1) | US11418951B2 (zh) |
EP (1) | EP3668043A4 (zh) |
CN (2) | CN110741613B (zh) |
WO (2) | WO2019075608A1 (zh) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN113674455A (zh) * | 2021-08-13 | 2021-11-19 | 京东科技信息技术有限公司 | 智能门锁远程控制方法、装置、系统、设备及存储介质 |
Families Citing this family (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DK3738331T3 (da) * | 2018-04-05 | 2021-05-31 | Ericsson Telefon Ab L M | Konfigurering af radioressourcer |
CN113193932B (zh) * | 2019-09-27 | 2022-08-23 | 腾讯科技(深圳)有限公司 | 网络节点执行的方法以及相应的网络节点 |
CN112671661A (zh) * | 2020-12-24 | 2021-04-16 | 广州市网优优信息技术开发有限公司 | 物联网数据传输方法及系统 |
CN118303054A (zh) * | 2021-11-26 | 2024-07-05 | Abb瑞士股份有限公司 | 用于在网络系统中进行设备调试的方法及网络系统 |
Citations (10)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20050210234A1 (en) * | 2004-03-17 | 2005-09-22 | Best Fiona S | Reach-back communications terminal with selectable networking options |
CN101668016A (zh) * | 2009-09-30 | 2010-03-10 | 华为技术有限公司 | 鉴权方法及装置 |
CN102893695A (zh) * | 2010-05-13 | 2013-01-23 | 日本电气株式会社 | 网关设备、基站、移动管理服务器和通信方法 |
CN103414709A (zh) * | 2013-08-02 | 2013-11-27 | 杭州华三通信技术有限公司 | 用户身份绑定、协助绑定的方法及装置 |
CN103596166A (zh) * | 2012-08-13 | 2014-02-19 | 电信科学技术研究院 | 一种标识映射方法与设备及策略控制方法与系统 |
CN104038389A (zh) * | 2014-06-19 | 2014-09-10 | 高长喜 | 多重应用协议识别方法和装置 |
CN105592449A (zh) * | 2014-10-20 | 2016-05-18 | 中国电信股份有限公司 | 业务识别方法和系统 |
CN105915396A (zh) * | 2016-06-20 | 2016-08-31 | 中国联合网络通信集团有限公司 | 家庭网络流量识别系统和方法 |
US20160262021A1 (en) * | 2015-03-06 | 2016-09-08 | Qualcomm Incorporated | Sponsored connectivity to cellular networks using existing credentials |
US20170126564A1 (en) * | 2015-04-13 | 2017-05-04 | Ajit Ramachandra Mayya | Method and system of application-aware routing with crowdsourcing |
Family Cites Families (21)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6948060B1 (en) * | 2000-08-11 | 2005-09-20 | Intel Corporation | Method and apparatus for monitoring encrypted communication in a network |
US7778194B1 (en) | 2004-08-13 | 2010-08-17 | Packeteer, Inc. | Examination of connection handshake to enhance classification of encrypted network traffic |
US7562211B2 (en) * | 2005-10-27 | 2009-07-14 | Microsoft Corporation | Inspecting encrypted communications with end-to-end integrity |
US8875236B2 (en) * | 2007-06-11 | 2014-10-28 | Nokia Corporation | Security in communication networks |
CN101714952B (zh) * | 2009-12-22 | 2012-03-07 | 北京邮电大学 | 一种接入网的流量识别方法和装置 |
CN102111263A (zh) * | 2011-02-21 | 2011-06-29 | 山东中孚信息产业股份有限公司 | 一种数据流加密的方法 |
CN102137022B (zh) * | 2011-04-01 | 2013-11-06 | 华为技术有限公司 | 提供用于识别数据包的信息的方法、爬虫引擎及网络系统 |
CN103428643A (zh) * | 2012-05-17 | 2013-12-04 | 大唐移动通信设备有限公司 | 一种动态重组方法及装置 |
EP2675203B1 (en) * | 2012-06-11 | 2019-11-27 | BlackBerry Limited | Enabling multiple authentication applications |
US9985967B2 (en) * | 2013-05-29 | 2018-05-29 | Telefonaktiebolaget Lm Ericsson (Publ) | Gateway, client device and methods for facilitating communication between a client device and an application server |
GB2518257A (en) * | 2013-09-13 | 2015-03-18 | Vodafone Ip Licensing Ltd | Methods and systems for operating a secure mobile device |
EP2890073A1 (en) * | 2013-12-31 | 2015-07-01 | Gemalto SA | System and method for securing machine-to-machine communications |
CN105099930B (zh) * | 2014-05-21 | 2019-07-09 | 新华三技术有限公司 | 加密数据流流量控制方法及装置 |
KR101663401B1 (ko) * | 2015-01-05 | 2016-10-06 | 주식회사 퓨쳐시스템 | Ssl로 암호화된 패킷을 커널에서 분석하는 장치 및 방법 |
CN107317674B (zh) * | 2016-04-27 | 2021-08-31 | 华为技术有限公司 | 密钥分发、认证方法,装置及系统 |
CN106209775B (zh) * | 2016-06-24 | 2019-05-24 | 深圳信息职业技术学院 | 一种ssl加密网络流的应用类型识别方法与装置 |
US10530811B2 (en) * | 2016-08-11 | 2020-01-07 | Vm-Robot, Inc. | Routing systems and methods |
US10715510B2 (en) * | 2017-01-16 | 2020-07-14 | Citrix Systems, Inc. | Secure device notifications from remote applications |
US10630642B2 (en) * | 2017-10-06 | 2020-04-21 | Stealthpath, Inc. | Methods for internet communication security |
US10367811B2 (en) * | 2017-10-06 | 2019-07-30 | Stealthpath, Inc. | Methods for internet communication security |
US10397186B2 (en) * | 2017-10-06 | 2019-08-27 | Stealthpath, Inc. | Methods for internet communication security |
-
2017
- 2017-10-16 WO PCT/CN2017/106349 patent/WO2019075608A1/zh active Application Filing
- 2017-10-16 CN CN201780091924.9A patent/CN110741613B/zh active Active
-
2018
- 2018-04-03 WO PCT/CN2018/081774 patent/WO2019076000A1/zh active Application Filing
- 2018-05-03 CN CN201880038900.1A patent/CN110771116B/zh active Active
- 2018-05-03 EP EP18869093.7A patent/EP3668043A4/en not_active Withdrawn
-
2020
- 2020-04-15 US US16/849,865 patent/US11418951B2/en active Active
Patent Citations (10)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20050210234A1 (en) * | 2004-03-17 | 2005-09-22 | Best Fiona S | Reach-back communications terminal with selectable networking options |
CN101668016A (zh) * | 2009-09-30 | 2010-03-10 | 华为技术有限公司 | 鉴权方法及装置 |
CN102893695A (zh) * | 2010-05-13 | 2013-01-23 | 日本电气株式会社 | 网关设备、基站、移动管理服务器和通信方法 |
CN103596166A (zh) * | 2012-08-13 | 2014-02-19 | 电信科学技术研究院 | 一种标识映射方法与设备及策略控制方法与系统 |
CN103414709A (zh) * | 2013-08-02 | 2013-11-27 | 杭州华三通信技术有限公司 | 用户身份绑定、协助绑定的方法及装置 |
CN104038389A (zh) * | 2014-06-19 | 2014-09-10 | 高长喜 | 多重应用协议识别方法和装置 |
CN105592449A (zh) * | 2014-10-20 | 2016-05-18 | 中国电信股份有限公司 | 业务识别方法和系统 |
US20160262021A1 (en) * | 2015-03-06 | 2016-09-08 | Qualcomm Incorporated | Sponsored connectivity to cellular networks using existing credentials |
US20170126564A1 (en) * | 2015-04-13 | 2017-05-04 | Ajit Ramachandra Mayya | Method and system of application-aware routing with crowdsourcing |
CN105915396A (zh) * | 2016-06-20 | 2016-08-31 | 中国联合网络通信集团有限公司 | 家庭网络流量识别系统和方法 |
Non-Patent Citations (4)
Title |
---|
OPPO: "Solution for UE assisted encrypted traffic detection", 《3GPP TSG SA WG2 MEETING #127 S2-181974》 * |
OPPO: "Solution for UE assisted encrypted traffic detection", 《3GPP TSG SA WG2 MEETING #127 S2-183209》 * |
OPPO: "Solution for UE assisted encrypted traffic detection", 《3GPP TSG SA WG2 MEETING #127 S2-184009》 * |
SOLUTION FOR UE ASSISTED ENCRYPTED TRAFFIC DETECTION: "OPPO", 《3GPP TSG SA WG2 MEETING #127 S2-180376》 * |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN113674455A (zh) * | 2021-08-13 | 2021-11-19 | 京东科技信息技术有限公司 | 智能门锁远程控制方法、装置、系统、设备及存储介质 |
CN113674455B (zh) * | 2021-08-13 | 2023-08-04 | 京东科技信息技术有限公司 | 智能门锁远程控制方法、装置、系统、设备及存储介质 |
Also Published As
Publication number | Publication date |
---|---|
EP3668043A1 (en) | 2020-06-17 |
CN110741613B (zh) | 2021-01-12 |
CN110771116A (zh) | 2020-02-07 |
EP3668043A4 (en) | 2020-10-07 |
CN110771116B (zh) | 2021-02-26 |
US11418951B2 (en) | 2022-08-16 |
WO2019075608A1 (zh) | 2019-04-25 |
WO2019076000A1 (zh) | 2019-04-25 |
US20200245136A1 (en) | 2020-07-30 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US11038846B2 (en) | Internet protocol security tunnel maintenance method, apparatus, and system | |
CN110741613A (zh) | 一种加密数据流的识别方法、设备、存储介质及系统 | |
US10069800B2 (en) | Scalable intermediate network device leveraging SSL session ticket extension | |
US20190123909A1 (en) | End-to-End Service Layer Authentication | |
EP3000249B1 (en) | Access network assisted bootstrapping | |
US11101978B2 (en) | Establishing and managing identities for constrained devices | |
CN109936529B (zh) | 一种安全通信的方法、装置和系统 | |
CN107483383B (zh) | 一种数据处理方法、终端、后台服务器及存储介质 | |
CN114503507A (zh) | 安全的发布-订阅通信方法和设备 | |
TW201644291A (zh) | 用於使用特定於應用的網路存取身份碼來進行到無線網路的受贊助連接的設備和方法(一) | |
EP3068093B1 (en) | Security authentication method and bidirectional forwarding detection method | |
EP3300331A1 (en) | Response method, apparatus and system in virtual network computing authentication, and proxy server | |
US8091122B2 (en) | Computer program product, apparatus and method for secure HTTP digest response verification and integrity protection in a mobile terminal | |
TW201706900A (zh) | 終端的認證處理、認證方法及裝置、系統 | |
TW201644292A (zh) | 用於使用特定於應用的網路存取身份碼來進行到無線網路的受贊助連接的設備和方法(二) | |
US10484869B2 (en) | Generic bootstrapping architecture protocol | |
WO2017031691A1 (zh) | 业务处理方法及装置 | |
CN111083091B (zh) | 一种隧道的创建方法、装置及存储介质 | |
WO2022083433A1 (zh) | 会话请求方法、装置、终端及存储介质 | |
CN110474922B (zh) | 一种通信方法、pc系统及接入控制路由器 | |
CN112087412B (zh) | 一种基于唯一令牌的服务访问处理方法及装置 | |
CN113938474B (zh) | 一种虚拟机访问方法、装置、电子设备和存储介质 | |
CN104737571B (zh) | 保护在通信网络中发送的有效载荷 | |
EP4221078A1 (en) | Packet processing method and apparatus | |
WO2019076025A1 (zh) | 一种加密数据流的识别方法、设备、存储介质及系统 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant |